Approved changes feed: RSS · Atom

cpe:2.3:a:spotfire:deployment_kit_used_in_spotfire_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSpotfire (ea18a48d-1cd7-5d2b-b6d2-abeda1cddfd1)
ProductDeployment Kit Used In Spotfire Server (cb5a1da9-e85a-59af-bd26-ab9032351093)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3115 vulnerable 2026-06-08 07:23:08.136263 Spotfire Data Function Vulnerability
Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute malicious files, leading to arbitrary code execution
Published: 2025-04-09T18:12:28.348Z
Updated: 2025-11-11T11:47:58.064Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3114 vulnerable 2026-06-08 07:23:08.133057 Spotfire Code Execution Vulnerability
Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise. Sandbox Bypass Vulnerability: A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls.
Published: 2025-04-09T17:29:48.612Z
Updated: 2025-04-15T20:29:11.223Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.